PIPEDA (Personal Information Protection and Electronic Documents Act)

PIPEDA is the Canadian federal law on the protection of personal information in the private sector (S.C. 2000, c. 5). It governs the collection, use and disclosure of personal information in interprovincial and international commercial activities. For electronic signatures, it requires that signature data (name, email, session metadata) be collected with informed consent, stored securely and deleted upon request. The province of Quebec has its own law (Law 25) which prevails over PIPEDA for intra-Quebec activities. Certyneo hosts signature data in Europe (IONOS Germany); transfers to Canada remain governed by GDPR-PIPEDA standard contractual clauses.